4349 matches found
CVE-2026-50652
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50653
Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-49178
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network...
CVE-2026-49164
Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2026-58529 Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
...
CVE-2026-58529
Summary (CVE-2026-58529): Out-of-bounds read in Active Directory Federation Services (AD FS) can disclose information over a network to an authorized attacker. The entry is supported by multiple connected sources (NVD/NCSC/CIRCL/NVDC/MSRC) confirming the vulnerability and its description. The CVS...
CVE-2026-50682 Active Directory Denial of Service Vulnerability
...
CVE-2026-50682
CVE-2026-50682 describes an out-of-bounds read in Windows Active Directory (Active Directory Domain Services) that can allow an authorized attacker to cause a denial of service over the network. The description and cross-references in the connected documents confirm the affected component as Wind...
CVE-2026-50682 Active Directory Denial of Service Vulnerability
...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-54121
CVE-2026-54121 affects Active Directory Certificate Services (AD CS). Root cause: improper authorization allowing an authorized attacker to elevate privileges over the network. Impact: elevation of privilege with high CVSS (8.8) per Microsoft-assigned metrics. Remediation: Microsoft has released ...
CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability
...
CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability
...
CVE-2026-50684
CVE-2026-50684 (AD FS spoofing) : The vulnerability is described as improper neutralization of input during web page generation (XSS) in Active Directory Federation Services, enabling an authorized attacker to perform spoofing over the network. The CVSS v3.1 base metrics indicate a Medium severit...
CVE-2026-50647
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50647
CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...